tree 102f921336af06c08996bc308404665cc7600aef
parent 94570f6e19723fa9ddf1326ee9eaf5cb249a7786
author Dmitry Kasatkin <dmitry.kasatkin@huawei.com> 1445538402 +0300
committer Dmitry Kasatkin <dmitry.kasatkin@huawei.com> 1445886782 +0200

evm: reset EVM status when file attributes changes

EVM verification status is cached in iint->evm_status
and if it was successful, never re-verified again when
IMA passes 'iint' to evm_verifyxattr().

When file attribute or extended attributes changes we may
wish to re-verify EVM integrity as well. For example,
after setting digital signature we may need to re-verify
the signature and update iint->flags that there is EVM
signature.

This patch enables that by resetting evm_status to
INTEGRITY_UKNOWN state.

Changes in v2:
* Flag setting moved to EVM layer

Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com>